The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-seamonkeyUpgrade thunderbirdUpgrade linux-thunderbirdUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Dec 21, 2011 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/seamonkey.Upgrade net-libs/xulrunner.Upgrade www-client/icecat.Upgrade www-client/mozilla-firefox.Upgrade dev-libs/nss.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade net-libs/xulrunner-bin. | Oct 30, 2017 | Dec 20, 2011 |
| Mfsa2011 55 | — | Upgrade to Mozilla Firefox version 9.0Upgrade to Mozilla Firefox version 3.6.28 | Jun 14, 2012 | Dec 20, 2011 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.6.0 | Feb 3, 2012 | Dec 20, 2011 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 9.0 | Feb 22, 2012 | Dec 20, 2011 |
| Suse | — | Upgrade mozilla-js-x86Upgrade libfreebl3-32bitUpgrade libfreebl3-debuginfo-32bitUpgrade mozillafirefox-branding-upstreamUpgrade libsoftokn3-debuginfoUpgrade mozilla-nss-32bitUpgrade xulrunner-debuginfo-x86Upgrade seamonkey-dom-inspectorUpgrade mozilla-js-debuginfo-x86Upgrade xulrunner-develUpgrade mozillafirefox-translations-commonUpgrade mozilla-xulrunner192-32bitUpgrade libfreebl3Upgrade seamonkey-translations-commonUpgrade mozilla-jsUpgrade mozilla-xulrunner192-gnome-debuginfo-32bitUpgrade mozilla-nss-debuginfoUpgrade mozilla-nss-certs-debuginfoUpgrade seamonkey-debuginfoUpgrade seamonkeyUpgrade mozilla-nsprUpgrade mozilla-xulrunner192-translations-otherUpgrade mozilla-xulrunner192-gnomeUpgrade mozilla-xulrunner192-debuginfo-32bitUpgrade enigmailUpgrade mozillathunderbirdUpgrade mozilla-js192-debuginfo-32bitUpgrade mozilla-xulrunner192-debuginfoUpgrade mozilla-js-debuginfoUpgrade mozilla-xulrunner192-buildsymbolsUpgrade chmseeUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefox-debuginfoUpgrade mozillathunderbird-translations-otherUpgrade mozilla-xulrunner192-develUpgrade mozilla-xulrunner192Upgrade xulrunner-buildsymbolsUpgrade mozilla-nspr-debuginfoUpgrade xulrunner-x86Upgrade MozillaFirefox-debugsourceUpgrade seamonkey-debugsourceUpgrade mozilla-xulrunner192-translations-other-32bitUpgrade libsoftokn3-debuginfo-32bitUpgrade MozillaThunderbird-debugsourceUpgrade mozilla-nspr-32bitUpgrade xulrunner-devel-debuginfoUpgrade MozillaThunderbird-debuginfoUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nspr-develUpgrade mozilla-xulrunner192-devel-debuginfoUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-debuginfo-32bitUpgrade mozilla-nss-debuginfo-32bitUpgrade mozilla-nss-toolsUpgrade mozillafirefox-translations-otherUpgrade mozilla-nss-certs-debuginfo-32bitUpgrade mozilla-js192-debuginfoUpgrade mozilla-xulrunner192-debugsourceUpgrade mozilla-nss-certsUpgrade mozilla-js192-32bitUpgrade mozilla-xulrunner192-translations-common-32bitUpgrade mozilla-nss-sysinit-debuginfoUpgrade mozilla-nss-debugsourceUpgrade mozilla-nss-tools-debuginfoUpgrade MozillaThunderbird-develUpgrade mozilla-xulrunner192-gnome-32bitUpgrade xulrunner-debugsourceUpgrade mozillafirefoxUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-js-debuginfo-32bitUpgrade xulrunner-debuginfo-32bitUpgrade mozillafirefox-develUpgrade libsoftokn3Upgrade mozilla-nspr-debugsourceUpgrade seamonkey-translations-otherUpgrade mozillathunderbird-translations-commonUpgrade mozilla-nss-sysinitUpgrade mozilla-nss-develUpgrade mozilla-nss-sysinit-debuginfo-32bitUpgrade mozilla-js192Upgrade chmsee-debugsourceUpgrade chmsee-debuginfoUpgrade mozilla-js-32bitUpgrade mozilla-nss-certs-32bitUpgrade seamonkey-ircUpgrade libfreebl3-debuginfoUpgrade xulrunner-32bitUpgrade mozilla-xulrunner192-translations-commonUpgrade xulrunnerUpgrade seamonkey-venkmanUpgrade mozilla-nssUpgrade xulrunner-debuginfoUpgrade mozilla-xulrunner192-gnome-debuginfoUpgrade enigmail-debuginfo | Feb 17, 2015 | Dec 20, 2011 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade xulrunner-1.9.2 | Nov 8, 2024 | Dec 21, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub